Two-Factor Authentication Setup Guide

What is Two-Factor Authentication?

Two-factor authentication (2FA) is a security method that requires two different ways to prove your identity when logging into your account.

The Two Factors

• Something you know - Your password
• Something you have - Your phone or authenticator device

Why Use 2FA?

Even if someone discovers your password, they still cannot access your account without the second factor (your phone or authenticator app). This provides significant protection against:

• Password breaches and data leaks
• Phishing attacks
• Brute force attacks
• Account takeover attempts

Setting Up 2FA

Step 1: Access Security Settings

1. Log into your digiMall account
2. Go to Account → Security Settings
3. Find the "Two-Factor Authentication" section
4. Click "Enable 2FA"

Step 2: Choose Your 2FA Method

Step 3: Complete Setup

For Authenticator Apps:

1. Install an authenticator app (see recommendations below)
2. Scan the QR code displayed on screen
3. Enter the 6-digit code from your app
4. Save your backup codes
5. Confirm activation

For SMS:

1. Enter your phone number
2. Click "Send verification code"
3. Enter the code received via SMS
4. Save your backup codes
5. Confirm activation

Recommended Authenticator Apps

Backup Codes

Backup codes are essential for account recovery if you lose access to your primary 2FA method.

Using Backup Codes

1. Go to the login page
2. Enter your username and password
3. When prompted for 2FA code, click "Use backup code"
4. Enter one of your saved backup codes
5. Complete login and update your 2FA settings if needed

Regenerating Backup Codes

Generate new backup codes if you've used several or suspect they may be compromised:

1. Go to Security Settings
2. Find the "Two-Factor Authentication" section
3. Click "Regenerate backup codes"
4. Save the new codes securely
5. Delete the old codes

Troubleshooting 2FA Issues

Can't Access Authenticator App

• Use backup codes to log in and reconfigure 2FA
• Check time sync on your device - incorrect time causes code mismatches
• Try recently generated codes - codes refresh every 30 seconds
• Reinstall authenticator app if the app is corrupted

Not Receiving SMS Codes

• Check for network connectivity and signal strength
• Verify your phone number is correct in account settings
• Check if SMS is blocked or filtered
• Try requesting a new code after a few minutes
• Contact your mobile carrier about SMS delivery issues

Lost Phone or Device

1. Use backup codes to access your account immediately
2. Log into security settings and disable 2FA temporarily
3. Set up 2FA on new device using a fresh authenticator app
4. Generate new backup codes for future use

Account Lockout

If you cannot access your account and have no backup codes:

1. Use the "Can't access your account?" link on the login page
2. Provide identity verification information
3. Contact customer support with proof of identity
4. Follow the account recovery process